CVE-2012-2735

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to hijack web sessions via a crafted session cookie.

Affected Products (21)

trevor_mckay · cuminvulnerable

redhat · enterprise_mrgvulnerable

References (12)

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=832151

http://rhn.redhat.com/errata/RHSA-2012-1278.html

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2012-1281.html

Vendor Advisory

http://secunia.com/advisories/50660

http://www.securityfocus.com/bid/55618

https://exchange.xforce.ibmcloud.com/vulnerabilities/78776

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=832151

http://rhn.redhat.com/errata/RHSA-2012-1278.html

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2012-1281.html

Vendor Advisory

http://secunia.com/advisories/50660

http://www.securityfocus.com/bid/55618

https://exchange.xforce.ibmcloud.com/vulnerabilities/78776